From 960bab8783198e938a1a0f4f8e082cd24f09fbf7 Mon Sep 17 00:00:00 2001 From: ralksta Date: Sun, 15 Feb 2026 23:11:44 +0100 Subject: [PATCH] fix: broaden CSP for CartoDB tile subdomains and Leaflet marker icons --- next.config.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/next.config.ts b/next.config.ts index f5a087b..4a2b1ce 100644 --- a/next.config.ts +++ b/next.config.ts @@ -7,7 +7,7 @@ const cspDirectives = [ "script-src 'self' 'unsafe-inline'", "style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com", "font-src 'self' https://fonts.gstatic.com", - "img-src 'self' data: https://*.basemaps.cartocdn.com", + "img-src 'self' data: https://*.basemaps.cartocdn.com https://a.basemaps.cartocdn.com https://b.basemaps.cartocdn.com https://c.basemaps.cartocdn.com https://d.basemaps.cartocdn.com https://unpkg.com", "connect-src 'self'", "frame-ancestors 'none'", "base-uri 'self'",